DLA-730-1 firefox-esr - security update

Bulletin has no description...

DLA-729-1 tomcat7 - security update

Bulletin has no description...

[SECURITY] [DLA 727-1] gst-plugins-good0.10 security update

Package : gst-plugins-good0.10 Version : 0.10.31-3+nmu1+deb7u1 CVE ID : CVE-2016-9634 CVE-2016-9635 CVE-2016-9636 Chris Evans discovered that the GStreamer 0.10 plugin used to decode files in the FLIC format allowed execution of arbitrary code. Further details can be found in his advisory at...

[SECURITY] [DLA 726-1] libdatetime-timezone-perl new upstream version

Package : libdatetime-timezone-perl Version : 1:1.58-1+2016j This update includes the changes in tzdata 2016j for the Perl bindings. For the list of changes, see DLA-725-1. For Debian 7 "Wheezy", these problems have been fixed in version 1:1.58-1+2016j. We recommend that you upgrade your...

DLA-725-1 tzdata - new upstream version

Bulletin has no description...

DLA-727-1 gst-plugins-good0.10 - security update

Bulletin has no description...

[SECURITY] [DLA 725-1] tzdata new upstream version

Package : tzdata Version : 2016j-0+deb7u1 This update includes the changes in tzdata 2016j. Notable changes are: - Saratov, Russia switches from +03 to +04 on 2016-12-04 at 02:00. For Debian 7 "Wheezy", these problems have been fixed in version 2016j-0+deb7u1. We recommend that you upgrade your...

Debian DLA-723-1 : libsoap-lite-perl security update

It was discovered that there was a 'Billion Laughs' 0 XML expansion vulnerability in libsoap-lite-perl, a Perl implementation of a SOAP 1 client and server. For Debian 7 'Wheezy', this issue has been fixed in libsoap-lite-perl version 0.714-1+deb7u1. We recommend that you upgrade your...

Debian DLA-724-1 : mcabber security update

It was discovered that there was a 'roster push attack' 0 in mcabber, a console-based Jabber XMPP client. For Debian 7 'Wheezy', this issue has been fixed in mcabber version 0.10.1-3+deb7u1. We recommend that you upgrade your mcabber packages. 0...

Debian DLA-722-1 : irssi security update

An information disclosure vulnerability was found in irssi. CVE-2016-7553 Other users on the same machine as the user running irssi with buf.pl loaded may be able to retrieve the whole window contents after /UPGRADE. Furthermore, this dump of the windows contents is never removed afterwards. For...

[SECURITY] [DLA 724-1] mcabber security update

Package : mcabber Version : 0.10.1-3+deb7u1 Debian Bug : 845258 It was discovered that there was a "roster push attack" 0 in mcabber, a console-based Jabber XMPP client. For Debian 7 "Wheezy", this issue has been fixed in mcabber version 0.10.1-3+deb7u1. We recommend that you upgrade your mcabber...

DLA-724-1 mcabber - security update

Bulletin has no description...

[SECURITY] [DLA 723-1] libsoap-lite-perl security update

Package : libsoap-lite-perl Version : 0.714-1+deb7u1 CVE ID : CVE-2015-8978 It was discovered that there was a "Billion Laughs" 0 XML expansion vulnerability in libsoap-lite-perl, a Perl implementation of a SOAP 1 client and server. For Debian 7 "Wheezy", this issue has been fixed in...

[SECURITY] [DLA 721-1] libgc security update

Package : libgc Version : 1:7.1-9.1+deb7u1 CVE ID : CVE-2016-9427 Debian Bug : 844771 libgc is vulnerable to integer overflows in multiple places. In some cases, when asked to allocate a huge quantity of memory, instead of failing the request, it will return a pointer to a small amount of memory...

Debian DLA-720-1 : xen security update

Multiple vulnerabilities have been discovered in the Xen hypervisor. The Common Vulnerabilities and Exposures project identifies the following problems : CVE-2016-9379, CVE-2016-9380 XSA-198 pygrub, the boot loader emulator, fails to quote or sanity check its results when reporting them to its...

DLA-721-1 libgc - security update

Bulletin has no description...

DLA-720-1 xen - security update

Bulletin has no description...

Debian DLA-716-1 : tiff security update

Multiple memory corruption issues have been identified in libtiff and its associated tools. CVE-2016-9273 Heap buffer overflow in cpStrips. CVE-2016-9297 Read outside buffer in TIFFPrintField. CVE-2016-9532 Heap buffer overflow via writeBufferToSeparateStrips. For Debian 7 'Wheezy', these problem...

[SECURITY] [DLA 718-1] vim security update

Package : vim Version : 2:7.3.547-7+deb7u1 CVE ID : CVE-2016-1248 Florian Larysch and Bram Moolenaar discovered that vim, an enhanced vi editor, does not properly validate values for the the filetype, syntax and keymap options, which may result in the execution of arbitrary code if a file with a...

[SECURITY] [DLA 716-1] tiff security update

Package : tiff Version : 4.0.2-6+deb7u8 CVE ID : CVE-2016-9273 CVE-2016-9297 CVE-2016-9532 Debian Bug : 844013 844226 844057 Multiple memory corruption issues have been identified in libtiff and its associated tools. CVE-2016-9273 Heap buffer overflow in cpStrips. CVE-2016-9297 Read outside buffe...